Vulnerabilities > Philips > Alice 6 Firmware

DATE CVE VULNERABILITY TITLE RISK
2018-03-28 CVE-2018-7498 Missing Encryption of Sensitive Data vulnerability in Philips Alice 6 Firmware R8.0.2
In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.
network
low complexity
philips CWE-311
critical
 9.8
9.8
2018-03-28 CVE-2018-5451 Improper Authentication vulnerability in Philips Alice 6 Firmware R8.0.2
In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
network
low complexity
philips CWE-287
critical
 9.8
9.8